
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
File: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft (raw, json)
Hash identifier: cITjr0Xm1e7N94epWs4ANXKhWxT75Elu7Y1VTEYoro4=
Subject key identifier: C3:48:B2:61:76:72:BF:8D:A6:CA:31:8E:B7:A0:49:7F:DC:8E:39:1F
Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Certificate serial: 0487
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
Manifest number: 0466
Signing time: Wed 05 Nov 2025 00:17:43 +0000
Manifest this update: Wed 05 Nov 2025 00:17:42 +0000
Manifest next update: Wed 12 Nov 2025 00:17:42 +0000
Files and hashes: 1: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl (hash: 3qjXYg99nFOIll++FYiJ0b6pFKJsMQvzuF2L9o4xwKw=)
2: A8827568116911EEBB241C32C4F9AE02.roa (hash: ePscgiftvgu3AgZJRcwiRUYhc5l5akEknNm+3bxCM0A=)
3: A6FA9A4A116911EEBB241C32C4F9AE02.roa (hash: RgkBiig85GBTWo6hrTV95O/BhHQIjrp9qKOVuIGC96Q=)
4: E248BDA63C5211EF94184A20C4F9AE02.roa (hash: uCKPAwy0X3Z4CL+hlBr0CZ+w6vMoqyCthCGEPEwyTxY=)
5: F4D295243FDA11EFAF5E676AC4F9AE02.roa (hash: aj4Q4SeRE+NI4REEKNFbR+3ayDuDtlipzDAl7u7My1E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl
rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1159 (0x487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Validity
Not Before: Nov 5 00:17:42 2025 GMT
Not After : Nov 12 00:17:42 2025 GMT
Subject: CN=690a97a7-29a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a7:0c:12:d3:13:57:1a:be:aa:17:96:ac:ae:
f5:b7:23:2d:de:a7:af:2a:13:29:b9:7c:af:14:d7:
69:1d:b0:71:58:9e:9d:4c:98:1a:17:b7:06:31:e4:
71:a0:75:ca:a4:28:38:64:71:51:2e:c4:e8:e1:e1:
8e:4b:32:88:26:2e:6d:f6:48:71:b8:1d:85:85:5e:
4d:da:a6:db:78:05:1e:55:e8:7c:d9:6a:46:ba:88:
bb:65:4c:e5:09:09:38:9f:1c:12:e8:fa:a9:e8:37:
df:01:7a:3e:1d:0a:8d:65:61:6c:98:72:12:ac:bf:
8c:b6:e8:15:ba:28:0f:f8:7c:d1:ae:86:4c:f4:8a:
8e:88:04:8a:50:3a:70:ae:3e:71:e1:3e:5e:28:37:
b9:64:ab:45:9c:ce:66:4c:2a:b4:ef:2b:8b:dd:d9:
ce:62:ad:58:d2:e3:3f:df:06:b2:32:1d:f7:88:95:
58:70:45:13:8a:d7:2d:c3:90:b4:51:e1:8f:bd:3e:
d3:85:3d:f2:a5:10:18:49:ae:aa:a2:26:5d:e7:98:
f5:e7:ae:8f:1a:35:70:2b:07:bd:84:70:84:97:a2:
65:8f:ce:c7:d2:51:2f:24:3b:2b:96:6f:b8:81:80:
3c:b9:63:7b:bc:0f:39:67:fe:87:9f:c7:ed:81:a6:
17:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:48:B2:61:76:72:BF:8D:A6:CA:31:8E:B7:A0:49:7F:DC:8E:39:1F
X509v3 Authority Key Identifier:
keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:33:5a:31:a6:42:0d:1c:f8:8b:6d:ef:cd:b4:15:30:ba:98:
aa:64:70:d6:b8:2e:3f:7e:41:5d:72:2c:17:6a:71:df:ca:0d:
9b:b4:e5:8a:f3:0e:0e:7b:ae:e4:4c:50:91:17:c6:91:11:c9:
0e:0c:95:72:c3:7e:2e:cf:69:50:75:aa:ac:2e:07:a4:eb:b6:
d8:90:8d:6f:36:a5:23:34:da:95:5f:c0:8e:fa:b3:ad:ee:c1:
92:9c:3b:67:38:40:da:2d:a5:2f:cb:c7:96:d3:76:aa:fa:83:
38:85:83:8a:c5:f1:a0:d6:ca:90:ba:22:25:23:69:2a:5c:f3:
a0:c3:75:e7:eb:22:89:b2:b3:b4:a9:35:a1:d9:b8:00:42:86:
cd:26:64:c7:35:5e:95:32:6d:f5:36:81:e4:d9:3f:aa:28:82:
13:74:28:55:0f:55:b9:5d:cc:ca:af:92:f8:30:6b:60:50:6e:
6f:6e:93:d7:a8:be:f7:5b:c3:98:6d:5a:83:b7:73:f7:3d:38:
f4:98:f4:4c:1c:f7:67:35:9e:b4:c2:8d:a4:2a:cd:1c:72:56:
29:17:b4:5f:de:62:04:2e:9e:ea:4c:55:b9:1d:4a:75:2b:bb:
da:1d:3b:a4:7c:bd:06:59:4e:fb:bb:29:c9:3a:d5:e1:16:74:
89:49:44:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG
NjExOUYzMEMwHhcNMjUxMTA1MDAxNzQyWhcNMjUxMTEyMDAxNzQyWjAYMRYwFAYD
VQQDEw02OTBhOTdhNy0yOWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4qcMEtMTVxq+qheWrK71tyMt3qevKhMpuXyvFNdpHbBxWJ6dTJgaF7cGMeRx
oHXKpCg4ZHFRLsTo4eGOSzKIJi5t9khxuB2FhV5N2qbbeAUeVeh82WpGuoi7ZUzl
CQk4nxwS6Pqp6DffAXo+HQqNZWFsmHISrL+MtugVuigP+HzRroZM9IqOiASKUDpw
rj5x4T5eKDe5ZKtFnM5mTCq07yuL3dnOYq1Y0uM/3wayMh33iJVYcEUTitctw5C0
UeGPvT7ThT3ypRAYSa6qoiZd55j1566PGjVwKwe9hHCEl6Jlj87H0lEvJDsrlm+4
gYA8uWN7vA85Z/6Hn8ftgaYXOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNIsmF2
cr+NpsoxjregSX/cjjkfMB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0
MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4
d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MEM4RS8wMzJFNTdCODc0MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendD
bkZoVnRNRjBVRnIyRVo4d3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB0M1oxpkINHPiLbe/NtBUwupiqZHDWuC4/fkFdciwXanHfyg2btOWK
8w4Oe67kTFCRF8aREckODJVyw34uz2lQdaqsLgek67bYkI1vNqUjNNqVX8CO+rOt
7sGSnDtnOEDaLaUvy8eW03aq+oM4hYOKxfGg1sqQuiIlI2kqXPOgw3Xn6yKJsrO0
qTWh2bgAQobNJmTHNV6VMm31NoHk2T+qKIITdChVD1W5XczKr5L4MGtgUG5vbpPX
qL73W8OYbVqDt3P3PTj0mPRMHPdnNZ60wo2kKs0cclYpF7Rf3mIELp7qTFW5HUp1
K7vaHTukfL0GWU77uynJOtXhFnSJSUSV
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:41:46 2025 by rpki-client